Vulnerability in Oracle Banking Payments Component of Oracle Financial Services Applications
CVE-2018-3024
5.4MEDIUM
Summary
A vulnerability exists in the Oracle Banking Payments component of Oracle Financial Services Applications, allowing low privileged attackers with network access via HTTP to compromise the system. Exploiting this vulnerability can enable unauthorized users to perform updates, insertions, or deletions to accessible data within Oracle Banking Payments, as well as gain unauthorized read access to certain data. This poses a significant risk to data confidentiality and integrity within supported versions 12.2.0, 12.3.0, 12.4.0, 12.5.0, and 14.1.0.
Affected Version(s)
Banking Payments 12.2.0
Banking Payments 12.3.0
Banking Payments 12.4.0
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved